PCDBE practice questions 81–90

1. Question 81 · 170 in bank

   An analytics team needs to read data out of Cloud SQL for SQL Server and update a table in Cloud Spanner. You need to create a service account and grant least privilege access using predefined roles. What roles should you assign to the service account?

   • Aroles/cloudsql.viewer and roles/spanner.databaseUser
   • Broles/cloudsql.editor and roles/spanner.admin
   • Croles/cloudsql.client and roles/spanner.databaseReader
   • Droles/cloudsql.instanceUser and roles/spanner.databaseUser

   Show answer

   Answer: A

   Explanation

   We want to apply least privilege and need to read data out of Cloud SQL for SQL Server only, `roles/cloudsql.viewer` is good enough to statisfy the those requirement, that filters out B, C, and D already https://cloud.google.com/sql/docs/sqlserver/iam-roles#roles

   Source: Adapted from community discussion — absero1609

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 82 · 170 in bank

   You are responsible for designing a new database for an airline ticketing application in Google Cloud. This application must be able to: Work with transactions and offer strong consistency. Work with structured and semi-structured (JSON) data. Scale transparently to multiple regions globally as the operation grows. You need a Google Cloud database that meets all the requirements of the application. What should you do?

   • AUse Cloud SQL for PostgreSQL with both cross-region read replicas.
   • BUse Cloud Spanner in a multi-region configuration.
   • CUse Firestore in Datastore mode.
   • DUse a Bigtable instance with clusters in multiple regions.

   Show answer

   Answer: B

   Explanation

   I'd choose B. To me, there is no totally true option. I agree with dynamic_dba that A and D are wrong. B. Spanner supports JSON, but not that good (as Pilot50 pointed out) C. Firestore Firestore in Datastore mode does provide some degree of consistency guarantees, specifically "eventual consistency" for global queries and strong consistency for ancestor queries. However, it does not provide strong consistency for non-ancestor queries. In contrast, Cloud Spanner provides strong consistency for all transactions, which is especially important for applications that require ACID transactions across multiple regions. So between B and C, I'll pick Spanner for strong consistency

   Source: Adapted from community discussion — absero1609

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • cloud.google.com documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 83 · 170 in bank

   You are writing an application that will run on Cloud Run and require a database running in the Cloud SQL managed service. You want to secure this instance so that it only receives connections from applications running in your VPC environment in Google Cloud. What should you do?

   • A1. Create your instance with a specified external (public) IP address. 2. Choose the VPC and create firewall rules to allow only connections from Cloud Run into your instance. 3. Use Cloud SQL Auth proxy to connect to the instance.
   • B1. Create your instance with a specified external (public) IP address. 2. Choose the VPC and create firewall rules to allow only connections from Cloud Run into your instance. 3. Connect to the instance using a connection pool to best manage connections to the instance.
   • C1. Create your instance with a specified internal (private) IP address. 2. Choose the VPC with private service connection configured. 3. Configure the Serverless VPC Access connector in the same VPC network as your Cloud SQL instance. 4. Use Cloud SQL Auth proxy to connect to the instance.
   • D1. Create your instance with a specified internal (private) IP address. 2. Choose the VPC with private service connection configured. 3. Configure the Serverless VPC Access connector in the same VPC network as your Cloud SQL instance. 4. Connect to the instance using a connection pool to best manage connections to the instance.

   Show answer

   Answer: D

   Explanation

   Option D. This link explicitly indicates that "For private IP paths, your application will connect directly to your instance through Serverless VPC Access. This method uses TCP to connect directly to the Cloud SQL instance without using the Cloud SQL Auth Proxy." https://cloud.google.com/sql/docs/mysql/connect-run#connect_to

   Source: Adapted from community discussion — examprof

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 84 · 170 in bank

   You are troubleshooting a connection issue with a newly deployed Cloud SQL instance on Google Cloud. While investigating the Cloud SQL Proxy logs, you see the message Error 403: Access Not Configured. What should you do?

   • ACheck the app.yaml value cloud_sql_instances for a misspelled or incorrect instance connection name.
   • BCheck whether your service account has cloudsql.instances.connect permission.
   • CEnable the Cloud SQL Admin API.
   • DEnsure that you are using an external (public) IP address interface.

   Show answer

   Answer: C

   Explanation

   https://cloud.google.com/sql/docs/mysql/connect-auth-proxy#troubleshooting C because in docs it says "Make sure to enable the Cloud SQL Admin API. If it is not, you see output like Error 403: Access Not Configured in your Cloud SQL Auth Proxy logs." B is not correct because this is for a different error: "If you are getting a 403 notAuthorized error, and you are using a service account to authenticate the Cloud SQL Auth Proxy, make sure the service account has the correct permissions."

   Source: Adapted from community discussion — juliorevk

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 85 · 170 in bank

   You are working on a new centralized inventory management system to track items available in 200 stores, which each have 500 GB of data. You are planning a gradual rollout of the system to a few stores each week. You need to design an SQL database architecture that minimizes costs and user disruption during each regional rollout and can scale up or down on nights and holidays. What should you do?

   • AUse Oracle Real Application Cluster (RAC) databases on Bare Metal Solution for Oracle.
   • BUse sharded Cloud SQL instances with one or more stores per database instance.
   • CUse a Biglable cluster with autoscaling.
   • DUse Cloud Spanner with a custom autoscaling solution.

   Show answer

   Answer: D

   Explanation

   D. A SQL database architecture rules out Bigtable. Minimizing costs rules out Oracle RAC. That leaves B and D. B would work with each Cloud SQL instance being dedicated to a few stores which would not impact other Cloud SQL instances already running. The downside is the scaling up/down. To change the vCPU on a Cloud SQL instance requires it to be re-started and that’s disruption. Spanner also doesn’t autoscale by itself, but there’s a tool available for Spanner called Autoscaler which can automate scaling up/down. So on balance, D is the best answer. https://cloud.google.com/spanner/docs/autoscaling-overview

   Source: Adapted from community discussion — dynamic_dba

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

6. Question 86 · 170 in bank

   Your organization has strict policies on tracking rollouts to production and periodically shares this information with external auditors to meet compliance requirements. You need to enable auditing on several Cloud Spanner databases. What should you do?

   • AUse replication to roll out changes to higher environments.
   • BUse backup and restore to roll out changes to higher environments.
   • CUse Liquibase to roll out changes to higher environments.
   • DManually capture detailed DBA audit logs when changes are rolled out to higher environments.

   Show answer

   Answer: C

   Explanation

   I assume production environment shall be a standalone project. Based on this, A: No. Replication can't be done cross projects. B: No. Backup / restore only get a whole set drop / load statements from audit logs. External auditors would focus on "what changes". C: Yes. Liguibase could export change.yaml to hand over the external auditors. D: No. No way to capture audit logs and ship to the target project. Spanner is a managed service. Reference: https://cloud.google.com/spanner/docs/backup/gcloud https://cloud.google.com/spanner/docs/use-liquibase

   Source: Adapted from community discussion — zanhsieh

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 87 · 170 in bank

   Your organization has a production Cloud SQL for MySQL instance. Your instance is configured with 16 vCPUs and 104 GB of RAM that is running between 90% and 100% CPU utilization for most of the day. You need to scale up the database and add vCPUs with minimal interruption and effort. What should you do?

   • AIssue a gcloud sql instances patch command to increase the number of vCPUs.
   • BUpdate a MySQL database flag to increase the number of vCPUs.
   • CIssue a gcloud compute instances update command to increase the number of vCPUs.
   • DBack up the database, create an instance with additional vCPUs, and restore the database.

   Show answer

   Answer: A

   Explanation

   A: Issue a gcloud sql instances *** patch command to increase the number of vCPUs. Cores Y 1 to 96 (must be either 1 or an even number) Partial for shared vCPU gcloud sql instances patch INSTANCE [--activation-policy=ACTIVATION_POLICY] [--active-directory-domain=ACTIVE_DIRECTORY_DOMAIN] [--[no-]assign-ip] [--async] [--audit-bucket-path=AUDIT_BUCKET_PATH] [--audit-retention-interval=AUDIT_RETENTION_INTERVAL] [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL] [--availability-type=AVAILABILITY_TYPE] [--clear-password-policy] [--connector-enforcement=CONNECTOR_ENFORCEMENT] [--cpu=CPU] [--database-version

   Source: Adapted from community discussion — pk349

   References

   • Google Cloud documentation

   Next question

8. Question 88 · 170 in bank

   You are setting up a Bare Metal Solution environment. You need to update the operating system to the latest version. You need to connect the Bare Metal Solution environment to the internet so you can receive software updates. What should you do?

   • ASetup a static external IP address in your VPC network.
   • BSet up bring your own IP (BYOIP) in your VPC.
   • CSet up a Cloud NAT gateway on the Compute Engine VM.
   • DSet up Cloud NAT service.

   Show answer

   Answer: C

   Explanation

   Some of the options for accessing the internet include: Routing outgoing traffic through a NAT gateway. Routing traffic through a Compute Engine VM that serves as a proxy server. Routing traffic through Cloud VPN or Dedicated Interconnect to on-premises gateways to the internet. . https://cloud.google.com/bare-metal/docs/bms-setup#bms-access-internet-vm-nat

   Source: Adapted from community discussion — range9005

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 89 · 170 in bank

   You are configuring a brand new Cloud SQL for PostgreSQL database instance in Google Cloud. Your application team wants you to deploy one primary instance, one standby instance, and one read replica instance. You need to ensure that you are following Google-recommended practices for high availability. What should you do?

   • AConfigure the primary instance in zone A, the standby instance in zone C, and the read replica in zone B, all in the same region.
   • BConfigure the primary and standby instances in zone A and the read replica in zone B, all in the same region.
   • CConfigure the primary instance in one region, the standby instance in a second region, and the read replica in a third region.
   • DConfigure the primary, standby, and read replica instances in zone A, all in the same region.

   Show answer

   Answer: A

   Explanation

   A. Cloud SQL is a regional service so the primary and standby instances must be in the same region. A recommended practice would have them in different zones. A read replica could be in a different region, but that option isn’t offered probably because it would be too far away from the user base. Having it in a different zone from the primary and standby instances is therefore the best and only answer.

   Source: Adapted from community discussion — dynamic_dba

   References

   • Google Cloud documentation

   Next question

10. Question 90 · 170 in bank

    You are running a transactional application on Cloud SQL for PostgreSQL in Google Cloud. The database is running in a high availability configuration within one region. You have encountered issues with data and want to restore to the last known pristine version of the database. What should you do?

    • ACreate a clone database from a read replica database, and restore the clone in the same region.
    • BCreate a clone database from a read replica database, and restore the clone into a different zone.
    • CUse the Cloud SQL point-in-time recovery (PITR) feature. Restore the copy from two hours ago to a new database instance.
    • DUse the Cloud SQL database import feature. Import last week's dump file from Cloud Storage.

    Show answer

    Answer: C

    Explanation

    C. An HA configuration means a primary instance and a failover replica instance. There is no read replica unless you specifically create one. Hence, A and B are wrong. D is wrong since the question doesn’t mention logical backups, whereas an HA configuration would have automatic (physical) backups enabled. A PIT restore is the only answer here.

    Source: Adapted from community discussion — dynamic_dba

    References

    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCDBE practice, question 81. 170 questions available.